When Task Manager tells you that overall CPU is 100%, you’d be led to believe that the system is working as hard as it can and has no additional processing capacity available. And when Task Manager reports a process’ CPU at 40%, intuitively you believe that the process is consuming 40% of the system’s total available CPU capacity. Those were reasonably accurate interpretations through Windows 7 and Windows Server 2008 R2. …
There’s been confusion regarding Microsoft’s patch for CVE-2020–1472 (mitigating the so-called “Zerologon” attack), what you need to do, and when. That’s not entirely surprising: this vulnerability and phased patch response is very different from anything I can recall, and Microsoft’s documentation about it is complex. I’m going to try to clear up the major issues as concisely as I can.
First: if you haven’t yet, you must apply this patch to your domain controllers (DCs) as soon as possible. Some things might break (I’ll get to that next) but those breaks can be fixed. …
Aaron Margosis
Windows cybersec nerd. Co-author of Sysinternals books (w/Mark Russinovich). Global Techno Ninja at Tanium; tool maker (Policy Analyzer, LGPO, LUA Buglight;...)
